Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/srsOUMaXpRAADltdhwDOUEzTxN8.roa
File: srsOUMaXpRAADltdhwDOUEzTxN8.roa (raw, json)
Hash identifier: yKnaqvFZmLHAORzGuIrN+QxmV6HHLDvbOHhTdPEEY04=
Subject key identifier: B2:BB:0E:50:C6:97:A5:10:00:0E:5B:5D:87:00:CE:50:4C:D3:C4:DF
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A1A150CFDCF275FA1978E27B8E68EBF66C
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/srsOUMaXpRAADltdhwDOUEzTxN8.roa
Signing time: Tue 03 Nov 2026 12:09:50 +0000
ROA not before: Tue 03 Nov 2026 12:09:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 84.232.39.0/24 maxlen: 24
88.148.104.0/24 maxlen: 24
89.32.163.0/24 maxlen: 24
89.32.167.0/24 maxlen: 24
93.115.157.0/24 maxlen: 24
93.115.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a1:50:cf:dc:f2:75:fa:19:78:e2:7b:8e:68:eb:f6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Nov 3 12:09:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2bb0e50c697a510000e5b5d8700ce504cd3c4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:8e:63:32:0e:ae:60:59:6d:1f:66:ec:df:
c1:e9:47:d9:3a:ad:87:26:0c:e2:a6:4d:cd:0f:e2:
87:95:a0:2e:7e:b8:83:64:9d:2e:c7:53:ad:e0:cf:
9a:55:9b:3b:85:4a:a6:f7:1e:45:83:9e:1f:e7:ae:
49:cb:a6:c3:00:94:3f:9e:03:5b:b2:fd:0b:36:ea:
aa:91:d3:ea:53:b6:27:60:68:20:14:fa:b9:63:7f:
77:63:c5:64:83:a0:b3:b5:52:29:68:ce:36:21:d7:
d7:62:52:68:ba:b3:74:87:b0:b0:6c:c2:bf:51:c5:
fd:78:1b:37:c5:9a:62:bd:f5:f5:db:c7:10:be:09:
08:07:7b:f0:a4:f9:b0:52:f6:84:85:11:df:c7:3a:
1c:d8:90:90:84:ac:67:07:14:ef:be:65:3d:47:a2:
01:dc:c8:bf:82:4a:26:08:55:98:6e:5d:4a:09:d9:
3b:11:89:e4:54:12:1f:d9:e5:b7:40:c5:3f:68:a1:
a8:44:b1:c6:d7:2f:b0:bb:71:1d:7a:9d:db:60:62:
a9:55:9e:43:50:51:2f:b9:0c:48:f1:28:c3:73:85:
47:2b:cd:c2:d3:20:be:57:af:21:23:c5:30:4a:47:
d2:9d:86:21:f7:5b:ad:75:c8:d4:b8:f3:aa:95:5a:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BB:0E:50:C6:97:A5:10:00:0E:5B:5D:87:00:CE:50:4C:D3:C4:DF
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/srsOUMaXpRAADltdhwDOUEzTxN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.39.0/24
88.148.104.0/24
89.32.163.0/24
89.32.167.0/24
93.115.157.0-93.115.158.255
Signature Algorithm: sha256WithRSAEncryption
87:f3:84:e1:cc:60:3b:58:6b:d4:35:87:a2:54:2c:f4:3f:fb:
8e:2f:af:95:b9:b8:b9:2b:4a:44:3b:11:3e:92:fe:e1:ad:c9:
2f:90:86:66:25:9d:43:33:55:0d:08:d5:65:56:d7:ea:32:60:
42:a3:22:b0:35:82:f3:df:d6:45:66:fc:f8:f1:9d:42:45:f3:
4b:27:8d:bf:07:75:12:76:7b:db:f0:34:e3:08:65:85:b4:f4:
72:65:0f:1f:0c:42:48:e3:58:df:78:b0:95:57:78:0d:f5:df:
12:e1:21:af:5b:fb:93:ef:6f:16:dd:3e:27:29:c9:af:03:39:
da:b2:e5:3a:8b:dd:fd:f9:42:69:e9:28:46:90:23:12:29:8b:
9b:66:df:87:78:24:cb:86:71:e3:6a:80:d3:49:7a:a5:51:80:
81:ef:60:be:fc:86:ef:89:b4:35:94:d6:99:12:cf:21:38:a7:
88:a3:77:80:7d:57:0f:43:f0:2c:a8:a2:91:4a:47:93:1c:af:
8b:3b:a2:bb:d7:af:7a:b5:87:d3:8d:c9:c7:24:c2:4a:21:dd:
f3:7c:de:d9:4f:ea:0a:8e:e3:0a:f6:42:f4:68:9c:f3:03:c7:
d2:1b:49:d7:de:c2:60:15:81:eb:8f:b9:f7:66:99:d3:0c:b0:
9f:17:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:49:42 2026 by rpki-client